Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ae23e9-7799-3842-a631-70d77f0a9a40.roa
File: 66ae23e9-7799-3842-a631-70d77f0a9a40.roa (raw, json)
Hash identifier: sFyqW/JiRQz6pLkHLS06TlQPbPz1w3KcOYxGuVE2nIk=
Subject key identifier: 93:3C:28:B2:5A:C5:87:F3:6E:B9:7B:E4:F7:00:1E:CC:95:FD:D2:D9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A98CF3EC70AF2EC94DB60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ae23e9-7799-3842-a631-70d77f0a9a40.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.91.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:98:cf:3e:c7:0a:f2:ec:94:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9825d527-0a37-4d99-939b-b4b3ffde37a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:83:db:61:89:e2:7e:56:26:3b:af:9a:c8:
e5:2b:04:80:8f:9d:40:b7:e3:b7:e8:fe:a4:7d:cc:
02:27:4d:ce:86:84:52:80:9a:6a:b1:6a:34:36:8f:
7d:80:30:1c:6a:6e:9e:9e:56:b6:0f:8b:44:1d:e5:
80:81:ff:c1:b5:3f:11:55:5e:52:db:25:a7:d5:38:
b3:1e:51:17:13:68:72:5e:67:f4:67:68:cf:28:2c:
f6:72:a9:3e:d1:17:40:6f:9d:82:36:5a:a8:21:1b:
69:be:91:1d:bb:8d:46:10:ef:69:db:41:68:6a:2c:
02:b7:ed:10:56:66:06:2d:41:1d:e3:bf:56:6f:28:
05:fe:e4:00:2c:cd:d4:47:eb:fa:8f:8b:8f:8a:dc:
70:94:47:55:cd:a6:f1:5d:d5:50:33:73:e0:e9:d3:
b8:25:7c:bd:38:96:fa:43:cf:15:d6:37:14:8e:b1:
3c:8d:b4:43:53:ea:74:99:44:1c:56:59:0b:24:3f:
8a:e9:92:a0:b0:db:49:13:da:0a:f9:fc:09:e5:c3:
db:bc:d6:d0:cd:ae:bb:7d:85:d0:d4:d6:5e:2a:e9:
af:51:39:80:b0:54:0f:41:91:2a:d9:6a:e0:96:07:
b1:58:cf:52:91:ac:54:df:2f:37:02:cf:c6:d2:43:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:28:B2:5A:C5:87:F3:6E:B9:7B:E4:F7:00:1E:CC:95:FD:D2:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ae23e9-7799-3842-a631-70d77f0a9a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f7:21:98:f1:84:04:c4:bf:2d:33:64:44:7a:df:0a:70:f7:
f2:bd:07:b2:c4:c0:95:9a:c3:ef:50:ef:3c:4c:41:07:c1:c8:
0f:0e:8a:b8:b2:12:36:04:10:42:d3:55:e2:53:98:64:74:61:
3a:95:9b:ff:71:e8:8e:52:4f:ad:e9:11:c0:f1:6f:62:1a:6d:
02:bb:9f:52:44:30:db:10:a7:17:92:33:e9:84:c7:e5:d0:e7:
79:2a:ea:6f:60:7b:5f:9f:cb:90:d7:68:57:69:8d:d1:57:2f:
ad:af:de:ef:3f:ff:6e:0b:4d:5a:4e:b5:e5:d7:71:3f:61:13:
16:40:a6:a2:0e:e1:06:e3:ca:35:2d:7c:02:75:08:ee:e7:39:
72:6b:58:39:91:61:1a:50:c6:63:ff:70:a6:1e:e9:11:83:1d:
e5:d1:d3:1e:e1:bd:44:4a:98:b7:c7:04:35:0a:eb:57:42:8e:
c9:60:a5:61:98:67:78:a7:b0:1e:f3:ad:16:30:1a:26:b9:20:
bd:92:57:f6:b2:b2:37:a2:dd:b1:e0:e9:a9:2e:7b:8f:8a:a5:
b9:34:74:43:e2:7e:8c:ae:f3:0c:56:cc:a5:52:96:a4:26:de:
98:63:d0:42:d0:a5:71:d8:b8:c4:12:8c:35:d0:fc:f7:b3:ad:
b6:3b:2d:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCpjPPscK8uyU22AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTgyNWQ1MjctMGEzNy00ZDk5LTkzOWItYjRiM2ZmZGUzN2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizSD22GJ4n5WJjuvmsjlKwSAj51At+O36P6k
fcwCJ03OhoRSgJpqsWo0No99gDAcam6enla2D4tEHeWAgf/BtT8RVV5S2yWn1Tiz
HlEXE2hyXmf0Z2jPKCz2cqk+0RdAb52CNlqoIRtpvpEdu41GEO9p20FoaiwCt+0Q
VmYGLUEd479WbygF/uQALM3UR+v6j4uPitxwlEdVzabxXdVQM3Pg6dO4JXy9OJb6
Q88V1jcUjrE8jbRDU+p0mUQcVlkLJD+K6ZKgsNtJE9oK+fwJ5cPbvNbQza67fYXQ
1NZeKumvUTmAsFQPQZEq2WrglgexWM9SkaxU3y83As/G0kO54wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJM8KLJaxYfzbrl75PcAHsyV/dLZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZhZTIzZTktNzc5OS0z
ODQyLWE2MzEtNzBkNzdmMGE5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIltgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf3IZjxhATEvy0zZER63wpw9/K9B7LEwJWaw+9Q7zxMQQfByA8Oiriy
EjYEEELTVeJTmGR0YTqVm/9x6I5ST63pEcDxb2IabQK7n1JEMNsQpxeSM+mEx+XQ
53kq6m9ge1+fy5DXaFdpjdFXL62v3u8//24LTVpOteXXcT9hExZApqIO4QbjyjUt
fAJ1CO7nOXJrWDmRYRpQxmP/cKYe6RGDHeXR0x7hvURKmLfHBDUK61dCjslgpWGY
Z3insB7zrRYwGia5IL2SV/aysjei3bHg6akue4+Kpbk0dEPifoyu8wxWzKVSlqQm
3phj0ELQpXHYuMQSjDXQ/PezrbY7LR4=
-----END CERTIFICATE-----
Generated at Sat May 10 19:11:26 2025 by rpki-client